Privacy policy

Capacity Plan (the “Service”) is built and operated by DHAKAA (“we”, “us”). You can reach us about anything in this policy at support@dhakaa.dev.

• Account data. Your work email address. Sign-in uses one-time codes sent to that address, so we never hold a password.
• Workforce data you add. Agents’ names, work email addresses and locations; their contracts (weekly hours, working days, start and end dates) and the lines they work; your clients, activities and opening hours; forecasts and their assumptions; hire classes, planned exits and scenarios.
• Messages you send us. Your name, work email, company, team size and message when you use the contact form or email us.
• Technical data. IP address, browser and device details, and request logs kept by our hosting and database providers to run and secure the Service.
• Cookies. Only the ones the Service needs to work — see the cookie policy.

• To provide the Service: store your workspace, run the calculations and show you the results.
• To sign you in, by sending one-time codes to your email address.
• To answer your messages and walkthrough requests.
• To keep the Service secure, investigate problems and fix them.
• To meet our legal obligations.

We do not sell personal data, use it for advertising, or send it to third-party AI services. Every calculation in Capacity Plan runs on our own code.

Where the GDPR or similar laws apply, we rely on: performing our contract with you or your organisation; our legitimate interests in running, securing and improving the Service and answering enquiries; compliance with legal obligations; and your consent where the law requires it.

Your organisation decides which agent data goes into its workspace and is responsible for having a lawful basis for it and for informing its staff. We process that data only on your organisation’s instructions and only to provide the Service. Agents listed in a workspace do not sign in to Capacity Plan.

If you are an agent whose details were added by your employer, contact your employer first; we will help them answer your request.

We use a small number of providers to run the Service, under contracts that require them to protect the data:

• Supabase — database and authentication, including sign-in emails.
• Vercel — hosting and delivery of the application.
• Resend — delivery of messages sent through our contact form.

If you connect Planifizer, data moves between your Capacity Plan workspace and your Planifizer workspace, both operated by DHAKAA. We may also disclose data where the law requires it.

Our providers may process data outside your country. Where that happens we rely on appropriate safeguards, such as the European Commission’s standard contractual clauses.

Account and workspace data are kept while your account is active. When you close your account or ask us to delete it, we delete or anonymise the data within a reasonable period, unless the law requires us to keep it; backups roll off on our providers’ schedules. Contact messages are kept as long as we need them to handle your request and follow up.

Every table is protected by row-level security in the database, so a workspace’s rows are only ever returned to its owner. Sign-in is passwordless, and data is encrypted in transit and at rest. The security overview has the details.

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to restrict or object to some processing, and to withdraw consent. Write to us at support@dhakaa.dev and we will answer within the time the law allows. You can also complain to your data protection authority.

The Service is a business tool and is not meant for anyone under 16.

We will update this page when our practices change and show the date at the top. If a change is material, we will tell account holders in the Service or by email before it takes effect.